5bb8d38631db604b1f4eb73cf62cd961ef7632ed409b2dcf173e957f6a80cbce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bb8d38631db604b1f4eb73cf62cd961ef7632ed409b2dcf173e957f6a80cbce
Size

21KB
MD5

e8097f29f6d7c0f7535457d49c7ed40d
SHA1

20279cf7c6b790c554f2d47753506e17c7bedffa
SHA256

5bb8d38631db604b1f4eb73cf62cd961ef7632ed409b2dcf173e957f6a80cbce
SHA512

96debcf587cfbd682791b9f8d353b0da27987fc2acbb42cdbdd8a1a6af429dad1cab7aa811aa0f5cf49bbb5531946d444ba12e3e5d8b489169beb9e0a394ec16
SSDEEP

384:PBz1vP+himPTE9PUtNL3QLfK1Z6N+nLz2xSpnHa7k:PBz5+IUmUth36fsISL/96

Score

N/A

Malware Config

Signatures

Files

5bb8d38631db604b1f4eb73cf62cd961ef7632ed409b2dcf173e957f6a80cbce
.exe windows x86

e8e0475af03507de094eda05b6dbd726

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
lstrcatA
GetModuleHandleA
GetLastError
CloseHandle
Process32Next
lstrcmpiA
Process32First
CreateToolhelp32Snapshot
FreeLibrary
DeleteFileA
MoveFileA
lstrlenA
SetFileTime
LocalFileTimeToFileTime
FindFirstFileA
CreateFileA
GetTickCount
ReadFile
SetFilePointer
ExitProcess
WinExec
GetModuleFileNameA
GetWindowsDirectoryA
CopyFileA
GetLocalTime
Sleep
ReleaseMutex
CreateMutexA
GetCommandLineA
CreateThread
RaiseException
InterlockedExchange
LocalAlloc
GetStartupInfoA

msvcrt

memset
strlen
??2@YAPAXI@Z
malloc
??3@YAXPAX@Z
strstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strchr
_except_handler3
_strcmpi
_strrev

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ